OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
3 views

keepalive parameter setting in openldap for consumer doesnot work

I unplugged network cable of provider,added new users but it never synchronizes. with the consumer.Consumer never sends the keepalive signals I am using 2.4.39 version of Openldap on windows machine ...
0
votes
0answers
13 views

Restore LDAP data from copied files

My server has broken and I had to urgently put it up again. I needed to reinstall the system and, since I was time constrained, I lazily just copied the directories I considered necessary (/etc, /opt, ...
0
votes
1answer
8 views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
1
vote
1answer
26 views

Are there any ldap proxy servers that can supplement the results from the main ldap server?

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
0
votes
0answers
14 views

OpenLDAP PAM authen does not support SSHA on FreeBSD10

OpenLDAP PAM authen does not support SSHA? Hi everyone, Now, I lost one day to figure out, the reason my FreeBSD10 can not authenticate SSH user via LDAP because pam_ldap and nss_ldap do not support ...
0
votes
1answer
12 views

phpldapadmin uidNumber stopped auto-updating on new user creation

We are having an issue that just started this morning. It seems our phpldapadmin (1.2.04) interface has stopped auto-incrementing the uidNumber on new user creation. Basically we are stuck at ...
0
votes
1answer
19 views

Change SAMBA password in LDAP with Apache Directory Studio

I am using Apache Directory Studio to administer a small LDAP database, and I am planning to stop using LAM for user and group management because it lacks groupOfUniqueNames support. I have only one ...
2
votes
1answer
25 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
0
votes
1answer
25 views

Slapd execution fails after installation

When I run OpenLDAP I get the following error: /usr/local/libexec/slapd: Symbol `ldap_int_global_options' has different size in shared object, consider re-linking Violación de segmento (`core' ...
0
votes
3answers
47 views

Can't use EXTERNAL authentication after enabling TLS in ldap-2.4

I used the following LDIF file to activate the TLS support for the LDAP server: dn: cn=config changetype: modify add: olcTLSCipherSuite olcTLSCipherSuite: NORMAL - add: olcTLSCRLCheck ...
0
votes
1answer
23 views

ldap change schema and config password

I installed openldap server to fedora 20, and try use it for manage bugzilla accounts. So I first configure it for my domain, plus set password: dn: olcDatabase={0}config,cn=config changetype: modify ...
0
votes
1answer
27 views

Berkelay DB + Openldap : Program version doesn't match environment version

When I run : #slaptest it says "config file testing succeeded" If I run #slapd -f slapd.conf -d 256 I got: buildd@lamiak:/build/buildd/openldap-2.4.31/debian/build/servers/slapd ...
2
votes
0answers
48 views

OpenLDAP with MySQL works but need schema advice

So, I have downloaded the latest source of OpenLDAP, compiled with —-enable-sql, messed around with the slapd.conf, configured the odbc files, added the tables to my current DB, spend a week debugging ...
1
vote
1answer
71 views

OpenLDAP to Samba 4 Migration, create middle layer / webservice for user initiated password migration/change?

for the last few days I have been looking into migrating an old linux server running a OpenLDAP/Samba 3 configuration with about 100 users to a new SBS Server running Samba 4 (like Zentyal or UCS). ...
0
votes
1answer
15 views

hard time enabling openldap meta backend

Right now I'm feeling stuck with enabling meta backend using openldap 2,4 this is the result of my slaptest [root@localhost openldap]# slaptest -f slapd.conf -F slapd.d/ WARNING: No dynamic ...
0
votes
0answers
46 views

openldap timeout causes server to slow down

Running into an issue with openldap I've never had much success to tackle. We run openldap on another machine on its own vlan. Now if that ldap server dies anything that accesses uid or gid seems to ...
0
votes
1answer
28 views

Cannot see objectClass from custom schema

I added new schema to my ldap server but when I trey to create an entry with custom objectClass an custom attributes, it doesn't see my custom stuff. It's just experimental so OID's are not important. ...
0
votes
1answer
22 views

Distributing a subtree into different LDAP servers

I'm trying to create a distributed OpenLDAP server where everything under a subtree is split into different servers. For example, I have ou=users,dc=ldap. I have users under it in a flat structure, ...
0
votes
0answers
53 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
1answer
59 views

PAM Authentication with LDAP on Debian Jessie Not Finding LDAP Users

Debian Jessie (specifically, Debian Server Wheezy x64 with testing repos) OpenLDAP 2.4.39 libpam-ldapd 0.9.4-1 Upon installing libpam-ldapd, the dpkg configuration asked for my LDAP address ...
0
votes
0answers
27 views

openldap proxy with 3 ldap (openldap,ad,edir) how to rewrite date format from active directory one to ldap

I have a openldap with meta backend connected to 3 ldap (one openldap, one edir and one AD). I test authentication again the proxy , it's working. my problem : dev team is working to use this ...
0
votes
1answer
28 views

ldapsearch from root succeeds, but doesn't succeed when base is not root

I have a ou which looks like this ou=abcd,ou=ou1,ou=ou2,dc=mydomain,dc=com The ou has a property called 'l' which has a value pqrs. I do the following search ldapsearch -x -b "dc=mydomain,dc=com" ...
0
votes
0answers
65 views

MacOS builtin OpenLDAP: DB_NOTFOUND error

I am trying to setup builtin OpenLDAP server in MacOS Mavericks. I managed to configure and start it. I can login with a LDAP client using the root credentials and create new users. My problem is that ...
1
vote
1answer
70 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
0
votes
1answer
45 views

OpenLDAP server network architecture and hardware requierments [closed]

I would like to know your opinions and experience while setting-up a centralized authentication server using OpenLDAP. Currently a have a few hosted servers running a few services (email, webapps, ...
1
vote
1answer
40 views

ldapsearch and SRV RRs

I am attempting and failing to use ldapsearch (or any of the other openldap utilities) with DNS SRV Resource Records. However, I believe it should be possible and that I am using the proper syntax. ...
0
votes
1answer
67 views

issue with master and slave ldap configuration

I am configuring master and slave ldap configuration. Initially I installed LDAP in Master machine and also installed on slave machine apt-get install -y slapd ldap-utils while installing LDAP ...
0
votes
0answers
22 views

Issues setting up a backup OpenLDAP server

I've been trying to replicate the OpenLDAP server we currently have, so that we can use it in the event the main server crashes. I was able to get the database transferred, as well as the TLS certs, ...
1
vote
0answers
58 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
-5
votes
1answer
432 views

Migrating LDAP user and password to SAMBA4 AD

As title suggests. We are migrating from OpenLDAP as user authentication to Samba 4 AD Domain. But I can't find any information on how to transfer passwords and users to Samba 4 AD. How to migrate ...
1
vote
3answers
96 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
0
votes
0answers
24 views

How to make a role with all permissions on Ldap?

I'm working with Open Ldap and want to make a role which has all permissions. I mean if I make a new permission on the future, the role should automatically has that permission and no need to add the ...
1
vote
0answers
14 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
-1
votes
1answer
445 views

Ubuntu 14.04, OpenLDAP TLS problems

So i have set up an openldap server using this guide here. It worked fine. But as i want to use sssd i also need TLS to be working for ldap. So i looked into and followed the TLS part of the guide. ...
0
votes
1answer
102 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
0
votes
3answers
68 views

OpenLDAP ACLs are not working

First things first, I'm currently working with an OpenLDAP: slapd 2.4.36 on a Fedora release 19 (Schrödinger’s Cat). I've just install the openldap with yum and my configuration is the following one: ...
1
vote
2answers
70 views

How to disable password change for openldap user?

Considering possible solutions for some improvements I run into this theoretical question and I couldn't find a satisfying answer. Some of you may have first-hand experience with this in practice, so ...
0
votes
2answers
53 views

view all possible attributes of an objectClass for LDAP

I'm scripting some ldap automation and have reached a slight hangup. Basically, I want to check if an attribute being added to an entry actually exists within a given objectClass before I try to add ...
0
votes
1answer
81 views

Add group/user on OpenLDAP

I am setting up OpenLDAP for the first time, on RHEL6 and using Puppet to do the initial install/configuration. I believe the configuration uses the slapd.d rather than slapd.conf method. Basically, ...
-1
votes
1answer
94 views

OpenLDAP modify member is not allowed

I am Struggeling with my LDAP attributes. I already created a few test users and groups, but I am unable to add users to the groups. #!DATE 2014-05-22T11:48:16.324 #!ERROR [LDAP: error code 65 - ...
2
votes
1answer
111 views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
1
vote
0answers
191 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
0
votes
1answer
21 views

OpenLDAP and range attributes

I am trying to query the "member" attribute of a groupOfNames object, and in AD, I can be sure to retrieve all of them, should they exceed the maximum of 1000 entries, by using ranged attribute ...
1
vote
1answer
377 views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
0
votes
2answers
68 views

custom ldap conf for apache 2.2

System: Apache 2.2.12 on Suse linux 11 patchset 2, with PHP and Perl. I want to create a custom ldap.conf file for use by Apache for user authentication to a remote system. I can't put my config ...
0
votes
1answer
193 views

LDAP Login fails, but su to ldap users works

I have a new ldap setup and I am trying to login, either directory to the machine or remotely over SSH. When I try to actually login, my authentication fails. If I login with a local user, (root), ...
0
votes
2answers
542 views

Basic openldap setup using slapd.d configuration

I'm trying to set up a test openldap server, having not worked with openldap before. I'm using the standard openldap-servers package on a redhat based machine (using Oracle Linux). I've installed the ...
1
vote
1answer
58 views

ldap ppolicy implementation for brute force prevention

I have an openldap server (with user passwords) open worldwide which I'm trying to secure. Step 1 was to limit access to data to authenticated users via ACLs. Step 2, to prevent brute force attacks, ...
0
votes
0answers
478 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
1
vote
0answers
53 views

Centos 6.2 Openwebmail change password issue

Recently build environment to test, install openldap, openwebmail and PAM authentication module After experiencing the current account login webmail change password will be "password is wrong, change ...